CVE-2015-8221 Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow.
HighCVSS 10.0
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google picasa | <= 3.9.140 | No fix listed |